Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/GmVe1_dUtE2thDPnKTTodQa1WTk.roa
File: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (raw, json)
Hash identifier: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=
Subject key identifier: 1A:65:5E:D7:F7:54:B4:4D:AD:84:33:E7:29:34:E8:75:06:B5:59:39
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019425FD7815B0E333FF75DBD3C13638A6C3
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/GmVe1_dUtE2thDPnKTTodQa1WTk.roa
Signing time: Thu 02 Jan 2025 07:49:15 +0000
ROA not before: Thu 02 Jan 2025 07:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8820
IP address blocks: 2001:67c:1758::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:78:15:b0:e3:33:ff:75:db:d3:c1:36:38:a6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Jan 2 07:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a655ed7f754b44dad8433e72934e87506b55939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:d7:9e:00:27:04:4b:e7:02:2c:10:aa:52:
39:5e:87:07:cd:26:b7:1b:9c:30:62:d7:cd:03:d9:
e5:31:5c:d5:f2:b0:77:bd:85:f5:91:4c:94:99:eb:
04:2f:c1:60:47:72:b8:c0:65:2e:6e:c9:90:9b:3e:
23:17:ab:0a:4f:be:17:d4:af:29:c6:79:f0:ff:df:
63:18:75:6f:41:41:9e:57:97:19:a3:36:1b:a5:bb:
6b:96:8e:73:a1:7e:ad:b5:3f:76:2a:60:0e:34:68:
20:52:5e:4b:ac:05:44:15:8e:c4:e4:6d:2e:46:60:
b4:da:72:2f:82:7b:cf:8f:fe:e5:b7:07:5c:22:48:
ab:0e:7c:07:9c:a4:cb:c7:40:9a:99:c3:6c:16:40:
8e:a0:bb:f8:84:fb:5d:94:44:d3:89:f7:a4:f5:bc:
d4:ee:47:fb:c0:d7:34:7f:44:4a:a7:4c:83:63:d6:
38:1a:2d:b4:23:5e:f0:a4:9d:46:61:df:0b:1c:34:
4f:c3:10:d9:aa:68:97:0b:19:7b:b9:4c:03:4a:d9:
ad:5e:14:aa:b0:13:12:a6:ec:b4:2f:eb:bf:41:2f:
99:47:6b:48:31:16:14:a9:50:9d:ef:99:9e:e2:11:
fe:36:85:85:8e:88:d6:59:9e:8c:b0:21:7e:8c:ce:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:5E:D7:F7:54:B4:4D:AD:84:33:E7:29:34:E8:75:06:B5:59:39
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/GmVe1_dUtE2thDPnKTTodQa1WTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1758::/48
Signature Algorithm: sha256WithRSAEncryption
2b:b2:95:0c:c1:a9:26:f4:90:ce:0c:fc:1c:d5:6a:05:20:15:
fd:cd:19:c4:d9:e9:e3:65:54:cc:c9:e6:ad:f6:fe:90:ad:a1:
3c:84:8c:c8:08:05:ea:62:89:1b:42:f5:2b:ff:1c:25:60:34:
5a:5c:2b:80:9a:eb:e8:5f:ec:ab:ce:e8:47:45:37:21:ac:6c:
12:d7:ce:ce:23:fe:45:48:d1:7f:21:06:e6:ac:db:18:69:9f:
fa:78:c4:3c:43:8b:aa:79:b8:00:7f:aa:53:e0:72:eb:32:af:
31:a3:2c:a3:19:1f:0e:6d:39:b3:76:ba:35:b2:13:bc:ff:36:
08:56:c1:e4:e4:77:77:e2:1f:87:0f:02:be:50:d0:97:d7:94:
09:91:b7:52:56:42:98:f9:e0:d3:2a:58:2d:8f:cc:63:a4:86:
fe:49:a9:98:ab:ae:d2:f0:1b:70:20:c8:c9:89:81:5c:69:08:
7c:f3:39:a8:e2:77:98:39:58:6b:71:aa:d7:ee:a8:f4:10:9e:
b8:a8:87:77:be:64:50:f6:84:c6:26:b7:7a:7c:85:2a:c6:90:
e2:da:b3:28:f5:56:ed:4f:1f:6d:b3:96:91:e5:07:8e:38:46:
f5:4e:d2:21:c0:6a:0c:d6:f5:69:e2:0f:05:28:ab:6c:ba:f4:
31:23:6c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:55 2025 by rpki-client